Users and Roles: Account Setup and Permissions

Challenge

Note: all added users with any role need to be in the Local Administrators group on the Veeam server.

Insufficient permissions to perform Users and Roles specific functions, or inability to login to server to perform Users and Roles tasks.

Cause

Permissions may not be set correctly in Veeam SA account or in Veeam Database in conjunction with Users and Roles settings.

Solution

Note: Permissions are inclusive, for instance if a user is already a member of the Administrators group and they are also manually added to the “Users and Roles” list, they will have the privileges that are the greatest. To work around this, either create a custom user group within AD and add it to Veeam Backup & Replication’s “Users and Roles” section and remove the Administrators group, or manually specify all users that you wish to have access to Veeam Backup & Replication and remove the Administrators group from the “Users and Roles” section.

You can access the Users & Roles dialog by opening the Main File icon in the upper-left corner of the GUI:

Once opened, you can add local or Domain users as needed:

Note: If you need a user to perform multiple operations, such as Start/Stop jobs and Restore, add the user to Users and Roles multiple times as all required role groups (ex: User_1\Backup Operator and User_1\Restore Operator).

Adding Users to the SA group on the Veeam Server

For Veeam installations with MSSQL2008R2:

To add users to the Veeam group, navigate to Computer Management->System Tools->Local Users and Groups >Groups

Add the user in the built-in Veeam group named: ServerMSSQLUser$(VBRServerName)$VEEAMSQL2008R2:

Add the user to a remote users group if applicable.

Add the user to a group that can override security restrictions but is not Administrator (The built-in Backup Operators group is the most suitable). Otherwise, restore attempts with this user will have access only to the files from the C: drive, and receive ‘Access denied’ on other system drives.

Note: all added users with any role need to be in the Local Administrators group on the Veeam server.

For Veeam installations with MSSQL2005:To add users to the Veeam group, navigate to Computer Management->System Tools->Local Users and Groups >Groups

Add the user in the built-in Veeam group named: SQLServer2005MSSQLUser$(VBRServerName)$VEEAM:

Add the user to a remote users group if applicable.

Add the user to a group that can override security restrictions but is not Administrator (the built-in Backup Operators group is the most suitable). Otherwise, restore attempts with this user will have access only to the files from the C: drive, and receive ‘Access denied’ on other system drives.